Privacy Policy

Dear User,

We care about your privacy and want you to feel comfortable and safe while using our Store. Below you will find the most important information regarding the processing of personal data and the use of cookies on the ProbioDay.eu online store.

This Privacy Policy has been prepared in accordance with the GDPR (RODO), i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council.

Personal Data Controller

The controller of your personal data is:

SIRION EU spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw, ul. Wolińska 4, 03-699 Warszawa, entered into the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0001151420, NIP: 5243028461, REGON: 540731100.

The Controller can be contacted at the following e-mail address: [email protected].

Personal Data and Privacy

If you use our Store, place an order, create a User Account, contact us, subscribe to the newsletter, or use other functions of the Store, we may process your personal data.

We process your data solely to the extent necessary to operate the Store, fulfil orders, provide services by electronic means, carry out marketing activities, handle payments, deliveries, returns and complaints, and to perform the legal obligations imposed on the Controller.

What Data May We Process?

Depending on which functions of the Store you use, we may process, in particular:

first name and surname,
company name, if the order is placed as an entrepreneur,
tax identification number (NIP), if needed to issue an invoice,
delivery address,
billing address,
e-mail address,
phone number,
order data,
payment data,
data needed to handle a return or complaint,
data contained in correspondence sent to us,

technical data, such as IP address, cookie identifiers, and data about your device, browser and activity on the Store.

Purposes of Data Processing

Your personal data may be processed for the following purposes:

providing the services offered in the Store,
maintaining the User Account,
fulfilling orders,
carrying out delivery within the territory of Poland,
handling payments, including electronic payments and refunds,
handling returns, complaints and withdrawal from the contract,
issuing and storing accounting documents,
contacting the User or the Buyer,
sending the newsletter, if you have given your consent,
conducting direct marketing of the offered products and services,
creating advertising audience groups, including Custom Audiences and Lookalike Audiences, using customers’ contact data,
conducting analytical and statistical activities,
studying customer satisfaction,
ensuring the security of the Store,

establishing, pursuing or defending possible claims.

Legal Grounds for Data Processing

We process personal data on the basis of:

Article 6(1)(b) GDPR — where processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract, in particular to handle the order, User Account, payment, delivery, returns and complaints;

Article 6(1)(c) GDPR — where processing is necessary for compliance with a legal obligation to which the Controller is subject, in particular accounting, tax and bookkeeping obligations;

Article 6(1)(a) GDPR — where the basis for processing is your consent, for example in the case of the newsletter, certain marketing activities, or analytical and marketing cookies;

Article 6(1)(f) GDPR — where processing is necessary for the purposes of the legitimate interests pursued by the Controller, such as direct marketing, statistical analysis, ensuring the security of the Store, studying customer satisfaction, and establishing, pursuing or defending claims.

In the case of order fulfilment, delivery within the territory of Poland, payments, returns and complaints, the basis for data processing is primarily the performance of a contract or taking steps at the request of the data subject prior to entering into a contract, as well as the legal obligations imposed on the Controller, in particular accounting and tax obligations.

Is Providing Data Mandatory?

Providing data is voluntary, but in some cases it may be necessary in order to use certain functions of the Store.

Failure to provide data may, in particular, result in:

inability to create a User Account,
inability to use selected services of the Store,
inability to place and fulfil an order,
inability to carry out delivery within the territory of Poland,
inability to handle payment, return or complaint,

inability to receive information about promotions, special offers or the newsletter.

Withdrawal of Consent

Where data processing is based on your consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Data Processing Period

We will process your data only for as long as we have a legal basis to do so.

Data may be processed:

for as long as necessary to perform the contract or provide the service;
for the period required by law, in particular tax, accounting and bookkeeping regulations;
until the limitation period expires for claims related to the contract, order, complaint or use of the Store;
until consent is withdrawn, where processing is based on consent;
until an objection is effectively raised, where the basis for processing is the Controller’s legitimate interest;

until the data cease to be useful for analytical, statistical or marketing purposes, unless you withdraw your consent earlier or effectively raise an objection.

Data Security

When processing your personal data, we apply appropriate organisational and technical measures in accordance with applicable law.

In particular, we use connection encryption via an SSL certificate and take measures aimed at protecting data against unauthorised access, loss, destruction or unauthorised modification.

Your Rights

In connection with the processing of personal data, you have the right to:

access your personal data,
receive a copy of your data,
rectify your data,
erase your data,
restrict processing,
transfer your data to another controller,
object to the processing of your data,

withdraw your consent at any time, where the data is processed on the basis of consent.

You have the right to object to the processing of your personal data:

for reasons related to your particular situation — against processing based on Article 6(1)(f) GDPR;

at any time — against processing for the purposes of direct marketing.

If you wish to exercise your rights, please contact us at the following e-mail address: [email protected].

If you believe that your data is being processed unlawfully, you may lodge a complaint with the supervisory authority. The supervisory authority in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Profiling and Automated Decisions

As part of the use of tools such as Google Ads, Google Analytics and Meta Pixel, user profiles may be created for the purpose of personalising advertising content, remarketing and analysing the effectiveness of marketing activities.

As part of advertising activities, your e-mail address or phone number may be used to create audience groups within the Meta system, including Custom Audiences and Lookalike Audiences.

Data may be processed in an automated manner; however, it is not used by the Controller to make decisions that produce legal effects concerning the User or similarly significantly affect the User.

The User may manage consents regarding cookies and similar technologies through the settings available in the Store or through their browser settings.

Cookies

Our Store, like most websites, uses cookies.

Cookies:

are stored in the memory of your device, for example a computer, phone or tablet;
enable the use of the Store’s functions;
help to remember information about your session;
may support analytical, statistical and marketing activities;

do not cause changes to your device’s settings.

In the Store, cookies may be used for the following purposes:

ensuring the proper functioning of the Store,
remembering information about the User’s session,
handling the cart and the ordering process,
enabling access to the Store’s functions,
maintaining statistics and analytics,
conducting marketing activities,
displaying advertisements tailored to the User’s interests,

measuring the effectiveness of advertising.

Cookies necessary for the proper functioning of the Store may be used without the User’s separate consent.

Analytical and marketing cookies, including third-party cookies, are used on the basis of the User’s consent, where such consent is required by applicable law.

The User may change their cookie settings at any time, in particular through the consent panel available in the Store, if such a panel is provided, or through their web browser settings.

Using the appropriate browser options, you can at any time:

delete cookies,
block the use of cookies in the future,

limit the scope of cookie use.

Information on managing cookies can be found in the settings or help section of your web browser.

Third-Party Cookies and Technologies

Our Store may use third-party cookies and similar technologies, such as those of Google as part of Google Ads, Google Analytics or other analytics and advertising services, and of Meta as part of the Meta Pixel tool.

These technologies may be used for analytical and advertising purposes, including:

measuring the effectiveness of advertising,
creating audience groups,
remarketing,
analysing User behaviour in the Store,

displaying advertisements tailored to the User’s interests.

The use of analytical and marketing cookies is subject to obtaining the relevant consent, where such consent is required by applicable law.

External Services and Recipients of Data

We use the services of external entities, to whom your personal data may be disclosed, where necessary for the operation of the Store, order fulfilment, payment handling, deliveries, returns, complaints, marketing and analytical activities, or the performance of legal obligations.

Recipients of the data may include, in particular:

the provider of the software needed to run the online store,
the hosting provider,
the e-mail service provider,
the entity carrying out the delivery of goods,
logistics operators and carriers handling domestic shipments,
the payment service provider,
electronic payment operators,
banks and entities handling payments in PLN or payment refunds,
the accounting office,
the entity providing marketing services,
the entity providing statistical and analytical services,
entities providing IT services,
entities supporting customer service,
Meta Platforms Ireland Limited – in connection with the use of Meta’s advertising tools, including Custom Audiences and Lookalike Audiences,

relevant public authorities, to the extent the Controller is obliged to provide them with data.

Data is disclosed only to the extent necessary to achieve the given purpose.

Transfer of Data Outside the European Economic Area

In connection with the use of the services of external entities, in particular such as Google or Meta, some data may be transferred to third countries, including the United States.

The transfer of data outside the European Economic Area takes place in accordance with the GDPR, in particular on the basis of:

a European Commission adequacy decision,
standard contractual clauses approved by the European Commission,

other mechanisms ensuring an adequate level of data protection, where applicable.

If you subscribe to the newsletter, we will process your e-mail address in order to send commercial, marketing, promotional or educational information concerning the Store, the ProbioDay® brand and the products offered.

The basis for processing data for this purpose is your consent.

You may unsubscribe from the newsletter at any time, using the unsubscribe link available in the e-mail message or by contacting us at: [email protected].

Direct Marketing

We may process your personal data for the purpose of conducting direct marketing of our products or services.

The basis for such processing may be the Controller’s legitimate interest, consisting of promoting its own products and services, or your consent — where required by applicable law.

You have the right to object at any time to the processing of data for direct marketing purposes.

Deletion of Data and Account Deletion

You may exercise your right to erase your data stored in our service at any time, subject to cases in which further storage of data is required or permitted by law.

If you have a User Account, you may use the account deletion function, if available in the account settings, or contact us at: [email protected].

The personal data controller will receive your request for data deletion and, after verifying it, will delete the account in the service within a maximum of 10 business days.

Deletion of the account does not mean automatic deletion of all data related to orders placed. Some data may continue to be stored by the Controller for legal, settlement, tax, complaint-related purposes, or for the purpose of establishing, pursuing or defending claims — for the period required by applicable law or until the limitation period for claims expires.

Contact with the Controller

Would you like to exercise your rights regarding personal data?

Or perhaps you would like to ask something related to our Privacy Policy?

Write to us at the following e-mail address: [email protected].

You may also send questions to this address regarding the processing of data in connection with orders, payments, returns and complaints.

Final Provisions

The Privacy Policy may be updated, in particular in the event of changes to the law, changes to the functionality of the Store, changes to the tools used, or changes in the way personal data is processed.

The current version of the Privacy Policy is always available on the Store’s website.